File a formal privacy complaint
You can file a complaint with the Office of the Privacy Commissioner of Canada if you think that a business or federal government institution subject to federal privacy law has violated your privacy. Learn more about what we do.
Resolve your privacy issue with the organization
- If your concern is about a business, you first need to try and resolve your privacy issue with the business.
- If your concern is about a federal government institution, we suggest that you try and resolve the privacy issue with that institution before submitting a complaint.
Ensure your complaint is directed at the right organization
Here are four common issues that other organizations may be able to help you with:
Who to contact with concerns about protecting your personal health information
Questions and concerns about immigration and travel visas: contact Immigration, Refugee and Citizenship Canada
Landlords and tenants
Alberta, British Columbia and Quebec residents: address concerns to your provincial privacy authority
Other provinces and territories: file a complaint with our Office
Learn more about privacy in the landlord and tenant relationship
Workplace privacy
For workplace concerns, contact your provincial or territorial privacy authority if your concern relates to:
- Libraries, public schools, hospitals, local transit
- Retail stores, hotels, restaurants, as well as not-for-profits and charities
We also encourage you to use the following jurisdiction tool to help you decide if you should file your privacy complaint with the OPC:
Step 1:
Choose the type of personal information that you are concerned about.
Note: Personal information is information about an identifiable individual. Some examples of personal information may include age, ID numbers, ethnic origin, blood type, and financial or medical records.
Personal health
information
Step 2:
Choose the type of organization that your privacy concern relates to.
Federal government institution
Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions
The Privacy Act applies.
Provincial, territorial or municipal government institution
Examples: local transit authority, recreation complex, library, public school, hospital
Provincial and territorial laws for public sector will apply.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Federally-regulated business operating in Canada, engaged in commercial activity
Examples: bank, airline, telephone or broadcasting company
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.
Private sector organization, engaged in commercial activity
Examples: retail store, service, hotel, restaurant, insurance, entertainment
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.*
File a privacy complaint about a business.
*The provinces of Ontario, New Brunswick, Nova Scotia and Newfoundland and Labrador have substantially similar legislation with respect to health information custodians that may apply instead of the Personal Information Protection and Electronic Documents Act (PIPEDA). For more information, contact the provincial or territorial oversight office based on the location of the organization that has collected your personal information.
Health care professionals
Examples: doctors, dentists, physiotherapists, psychologists
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis).
For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization.
Individuals who collect, use or disclose personal information for non-commercial purposes
Examples: web sites, blogs, home security cameras
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes.
For more information, contact the Office of the Privacy Commissioner of Canada.
Federal political party, member of parliament, member of parliament staff
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity).
For more information, contact the Office of the Privacy Commissioner of Canada.
Not-for-profits and charities, not engaged in commercial activity
Examples: sports associations, professional associations, clubs
There may be provincial or territorial privacy legislation that applies.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Organizations carrying on business primarily outside of Canada
The Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis).
For more information, contact the Office of the Privacy Commissioner of Canada.
Personal employee
information
Step 2:
Choose the type of organization that your privacy concern relates to.
Federal government institution
Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions
The Privacy Act applies.
Provincial, territorial or municipal government institution
Examples: local transit authority, recreation complex, library, public school, hospital
Provincial and territorial laws for public sector will apply.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Federally-regulated business operating in Canada
Examples: bank, airline, telephone or broadcasting company
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.
Private sector organization, engaged in commercial activity
Examples: retail store, service, hotel, restaurant, insurance, entertainment
There may be provincial or territorial privacy legislation that applies.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Health care professionals
Examples: doctors, dentists, physiotherapists, psychologists
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis).
For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization.
Individuals who collect, use or disclose personal information for non-commercial purposes
Examples: web sites, blogs, home security cameras
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes.
For more information, contact the Office of the Privacy Commissioner of Canada.
Federal political party, member of parliament, member of parliament staff
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) applies. (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity).
For more information, contact the Office of the Privacy Commissioner of Canada.
Not-for-profits and charities, not engaged in commercial activity
Examples: sports associations, professional associations, clubs
There may be provincial or territorial privacy legislation that applies.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Organizations carrying on business primarily outside of Canada
For more information, contact the Office of the Privacy Commissioner of Canada.
Other types of personal information
about you
Step 2:
Choose the type of organization that your privacy concern relates to.
Federal government institution
Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions
The Privacy Act applies.
Provincial, territorial or municipal government institution
Examples: local transit authority, recreation complex, library, public school, hospital
Provincial and territorial laws for public sector will apply.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Federally-regulated organization operating in Canada, engaged in commercial activity
Examples: bank, airline, telephone or broadcasting company
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.
Private sector organization, engaged in commercial activity
Examples: retail store, service, hotel, restaurant, insurance, entertainment
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.**
File a privacy complaint about a business.
**The provinces of Alberta, British Columbia and Quebec have substantially similar legislation that may apply instead of the Personal Information Protection and Electronic Documents Act (PIPEDA) applies if the information is collected, used and disclosed entirely within that province.
- Alberta's Personal Information Protection Act
- British Columbia's Personal Information Protection Act
- Quebec's Act Respecting the Protection of Personal Information in the Private Sector
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Health care professionals
Examples: doctors, dentists, physiotherapists, psychologists
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis).
For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization.
Individuals who collect, use or disclose personal information for non-commercial purposes
Examples: web sites, blogs, home security cameras
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes.
For more information, contact the Office of the Privacy Commissioner of Canada.
Federal political party, member of parliament, member of parliament staff
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity).
For more information, contact the Office of the Privacy Commissioner of Canada.
Not-for-profits and charities, not engaged in commercial activity
Examples: sports associations, professional associations, clubs
There may be provincial or territorial privacy legislation that applies.
For more information, contact the provincial or territorial oversight office based on the location of the organization.
Organizations carrying on business primarily outside of Canada
The Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis).
For more information, contact the Office of the Privacy Commissioner of Canada.
Text version
Step 1: Choose the type of personal information that you are concerned about.
Note: Personal information is information about an identifiable individual. Some examples of personal information may include age, ID numbers, ethnic origin, blood type, and financial or medical records.
Step 2: Choose the type of organization that your privacy concern relates to.
| Type of organization | Applicable privacy legislation and suggested contact |
|---|---|
|
Federal government institution Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions. |
The Privacy Act applies. |
|
Provincial or municipal government institution Examples: local transit authority, recreation complex, library, public school, hospital. |
Provincial and territorial laws for public sector will apply. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Federally-regulated business operating in Canada, engaged in commercial activity Examples: bank, airline, telephone or broadcasting company. |
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies. |
|
Private sector organization, engaged in commercial activity Examples: retail store, service, hotel, restaurant, insurance, entertainment. |
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.* File a privacy complaint about a business. *The provinces of Ontario, New Brunswick, Nova Scotia and Newfoundland and Labrador have substantially similar legislation with respect to health information custodians that may apply instead of the Personal Information Protection and Electronic Documents Act (PIPEDA). For more information, contact the provincial or territorial oversight office based on the location of the organization that has collected your personal information. |
|
Health care professionals Examples: doctors, dentists, physiotherapists, psychologists. |
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis). For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization. |
|
Individuals who collect, use or disclose personal information for non-commercial purposes Examples: web sites, blogs, home security cameras |
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes. For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Federal political party, member of parliament, member of parliament staff |
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity). For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Not-for-profits and charities, not engaged in commercial activity Examples: sports associations, professional associations, clubs, advocacy organizations. |
There may be provincial or territorial privacy legislation that applies. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Organizations carrying on business primarily outside of Canada |
The Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis). For more information, contact the Office of the Privacy Commissioner of Canada. |
| Type of organization | Applicable privacy legislation and suggested contact |
|---|---|
|
Federal government institution Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions. |
The Privacy Act applies. |
|
Provincial or municipal government institution Examples: local transit authority, recreation complex, library, public school, hospital. |
Provincial and territorial laws for public sector will apply. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Federally-regulated business operating in Canada, engaged in commercial activity Examples: bank, airline, telephone or broadcasting company. |
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies. |
|
Private sector organization, engaged in commercial activity Examples: retail store, service, hotel, restaurant, insurance, entertainment. |
There may be provincial or territorial privacy legislation that applies. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Health care professionals Examples: doctors, dentists, physiotherapists, psychologists. |
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis). For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization. |
|
Individuals who collect, use or disclose personal information for non-commercial purposes Examples: web sites, blogs, home security cameras |
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes. For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Federal political party, member of parliament, member of parliament staff |
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity). For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Not-for-profits and charities, not engaged in commercial activity Examples: sports associations, professional associations, clubs, advocacy organizations. |
There may be provincial or territorial privacy legislation that applies. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Organizations carrying on business primarily outside of Canada |
For more information, contact the Office of the Privacy Commissioner of Canada. |
| Type of organization | Applicable privacy legislation and suggested contact |
|---|---|
|
Federal government institution Federal departments, agencies, etc. listed in the Privacy Act Schedule of Government Institutions. |
The Privacy Act applies. |
|
Provincial or municipal government institution Examples: local transit authority, recreation complex, library, public school, hospital. |
Provincial and territorial laws for public sector will apply. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Federally-regulated business operating in Canada, engaged in commercial activity Examples: bank, airline, telephone or broadcasting company. |
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies. |
|
Private sector organization, engaged in commercial activity Examples: retail store, service, hotel, restaurant, insurance, entertainment. |
The Personal Information Protection and Electronic Documents Act (PIPEDA) applies.** File a privacy complaint about a business. **The provinces of Alberta, British Columbia and Québec have substantially similar legislation that may apply instead of the Personal Information Protection and Electronic Documents Act (PIPEDA) if the information is collected, used and disclosed entirely within that province.
For more information, contact the provincial or territorial oversight office based on the location of the organization that has collected your personal information. |
|
Health care professionals Examples: doctors, dentists, physiotherapists, psychologists. |
There may be provincial or territorial privacy legislation that applies or the Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis). For more information, begin by contacting the provincial or territorial oversight office based on the location of the organization. |
|
Individuals who collect, use or disclose personal information for non-commercial purposes Examples: web sites, blogs, home security cameras |
In general, Canadian privacy laws do not apply to the conduct of individuals who are collecting, using or disclosing personal information for non-commercial purposes. For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Federal political party, member of parliament, member of parliament staff |
These types of organizations/individuals are not included in the Privacy Act Schedule of Government Institutions and the Personal Information Protection and Electronic Documents Act (PIPEDA) generally does not apply unless the organization/individual is conducting a commercial activity (fundraising is not a commercial activity). For more information, contact the Office of the Privacy Commissioner of Canada. |
|
Not-for-profits and charities, not engaged in commercial activity Examples: sports associations, professional associations, clubs, advocacy organizations. |
There may be provincial or territorial privacy legislation that applies. For more information, contact the provincial or territorial oversight office based on the location of the organization. |
|
Organizations carrying on business primarily outside of Canada |
The Personal Information Protection and Electronic Documents Act (PIPEDA) may apply (determined on a case-by-case basis). For more information, contact the Office of the Privacy Commissioner of Canada. |
File a complaint about a business
Learn how to file a complaint about a business under the Personal Information Protection and Electronic Documents Act (PIPEDA) and access the complaint form.
File a complaint about a federal institution
Learn how to file a complaint about a federal government institution under the Privacy Act and access the complaint form.
- Date modified: